Microsoft Microsoft Project Server
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-0954 | 2013 Service Pack 1 (64-bit edition) | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques | MEDIUM 5.4 | 1.5 % | ||
| CVE-2018-8575 | 2013 Service Pack 1 (32-bit edition) ; 2013 Service Pack 1 (64-bit edition) | A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka "Microsof | HIGH 7.8 | 20 % | ||
| CVE-2018-8254 | 2010 Service Pack 2 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.7 % | ||
| CVE-2018-8156 | 2010 Service Pack 2 ; 2013 Service Pack 1 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t | MEDIUM 5.4 | 2.8 % |